Forum Discussion

Stephane_Vidal_'s avatar
Stephane_Vidal_
Icon for Nimbostratus rankNimbostratus
Jan 26, 2009

monitor web proxy

Hi,

 

 

I am currently monitoring 2 web proxys using LTM using tcp/8080.

 

Best would be to http get www.hp.com for instance using individual proxy ips and associated NTLM credentials from LTM.

 

Do you know how can I achieve that?

 

 

Thanks for your contribution.

 

Stephane

 

application delivery
dev
devops
iRules
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jan 27, 2009
    Hi Stephane,

     

     

    You could configure a standard HTTP monitor to send a single HTTP request to the pool members. If the server response contains the receive string, it will be marked up in the pool.

     

     

    I believe that NTLM authentication requires multiple request/response loops so I don't think you could use NTLM with a standard HTTP monitor. Here is a related post (Click here).

     

     

    Does the proxy support any other authentication methods? If so, you could configure an HTTP monitor to do this health checking. You can get example monitor send strings in the LTM config guide for your version (Click here), in the Monitoring forum (Click here) or in the Monitoring Codeshare (Click here).

     

     

    Aaron
  • PinkieCom's avatar
    PinkieCom
    Icon for Nimbostratus rankNimbostratus
    Jan 23, 2017

    I spent a long time trying to work out why the standard HTTP monitors didn't work for this.

     

    It is because the HTTP monitor relies on receiving a "401 Authenticate" message from the initial BASIC auth request to kick in the NTLM negotiation.

     

    Because proxies respond with a "407 Proxy Authenticate" instead of a 401, the monitor doesn't work.

     

    So I wrote the following external monitor: https://devcentral.f5.com/s/articles/ntlm-authenticated-proxy-external-monitor-1013